API design auditor. Checks HTTP statuses, pagination, sorting, OpenAPI contracts, DTO consistency, error handling, rate limiting. Runs when API endpoints, DTOs, or controllers change.
